ktm.com

Checked 22 October 2026, 09:33 UTC · via 8.8.8.8
!Passed with warnings
25 passed 1 warning 0 failed 5 info

Registration

info

.com generic · Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA · expires 2027-06-26

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
Registered
27 June 1997
Last changed
27 June 2026
Expires
26 June 2027
Status
active
Registry nameservers
dns1.a1.net, dns2.a1.net, dns3.a1.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2027-06-26 #3
    The registration is valid until 2027-06-26 (246 days).
  • i
    No transfer lock
    The domain has no transfer lock (status: active). A registrar lock protects against unauthorized transfers.
    #4
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

dns1.a1.net, dns2.a1.net, dns3.a1.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
dns1.a1.net, dns2.a1.net, dns3.a1.net
NS in the zone
dns1.a1.net, dns2.a1.net, dns3.a1.net
NameserverAddressesNetwork (AS)Glue
dns1.a1.net80.120.17.26 2001:850:3030:31:80:120:17:26AS8447 A1TELEKOM-AT - A1 Telekom Austria AG, AT AS8447 A1TELEKOM-AT - A1 Telekom Austria AG, AT-
dns2.a1.net192.174.68.105 213.33.99.79 2001:850:3010:101:213:33:99:79 2001:67c:1bc::105AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS8447 A1TELEKOM-AT - A1 Telekom Austria AG, AT AS8447 A1TELEKOM-AT - A1 Telekom Austria AG, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-
dns3.a1.net176.97.158.105 2001:67c:10b8::105AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT AS1921 RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT-

Checks

  • ✓ 3 nameservers #6
    Delegated to dns1.a1.net, dns2.a1.net, dns3.a1.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • ✓ 2 autonomous systems #11
    The nameservers are spread over: AS1921 (RCODEZERO-ANYCAST-SEC1-TLD - ipcom GmbH, AT): 4 addresses; AS8447 (A1TELEKOM-AT - A1 Telekom Austria AG, AT): 4 addresses.
  • i
    All nameserver names under .net
    All nameserver names are under one TLD, so a problem with that TLD also makes the nameservers unreachable. Some operators use names under two TLDs for extra resilience.
    #12
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

info

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
dns1.a1.net 80.120.17.26NOERROR, 18 ms, authoritativenoyes / yesrefused-
dns1.a1.net 2001:850:3030:31:80:120:17:26NOERROR, 18 ms, authoritativenoyes / yesrefused-
dns2.a1.net 192.174.68.105NOERROR, 5 ms, authoritativenoyes / yesrefusedRcodeZero DNS
dns2.a1.net 213.33.99.79NOERROR, 12 ms, authoritativenoyes / yesrefused-
dns2.a1.net 2001:850:3010:101:213:33:99:79NOERROR, 13 ms, authoritativenoyes / yesrefused-
dns2.a1.net 2001:67c:1bc::105NOERROR, 4 ms, authoritativenoyes / yesrefusedRcodeZero DNS
dns3.a1.net 176.97.158.105NOERROR, 15 ms, authoritativenoyes / yesrefusedreg-wie1
dns3.a1.net 2001:67c:10b8::105NOERROR, 15 ms, authoritativenoyes / yesrefusedreg-wie1

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • i
    Identifying string disclosed
    These nameservers answer version queries with a string that is not a version number: dns2.a1.net: "RcodeZero DNS"; dns3.a1.net: "reg-wie1".
    #17
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 2026092300 · primary dns2.a1.net

Found

Primary (MNAME)
dns2.a1.net
Contact (RNAME)
domainadmin.a1.net
Serial
2026092300
Refresh / retry
10800 s / 3600 s
Expire
1814400 s
Negative TTL
3600 s

Serial per nameserver

NameserverSerial
dns1.a1.net (80.120.17.26)2026092300
dns1.a1.net (2001:850:3030:31:80:120:17:26)2026092300
dns2.a1.net (192.174.68.105)2026092300
dns2.a1.net (213.33.99.79)2026092300
dns2.a1.net (2001:850:3010:101:213:33:99:79)2026092300
dns2.a1.net (2001:67c:1bc::105)2026092300
dns3.a1.net (176.97.158.105)2026092300
dns3.a1.net (2001:67c:10b8::105)2026092300

Checks

  • ✓ Serial 2026092300 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 3h, retry 1h, expire 21d, negative TTL 1h.
  • ✓ Primary is a public nameserver #24
    The primary nameserver dns2.a1.net is one of the listed nameservers.
  • ✓ Contact domainadmin@a1.net #25
    The SOA RNAME domainadmin.a1.net means domainadmin@a1.net.
  • ✓ Date-based serial #26
    The serial 2026092300 follows the YYYYMMDDnn convention (2026-09-23).

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

info

53 records at the apex

Found

Read from
80.120.17.26:53
TypeValueTTL
SOAdns2.a1.net. domainadmin.a1.net. 2026092300 10800 3600 1814400 36003600
NSdns2.a1.net.3600
NSdns3.a1.net.3600
NSdns1.a1.net.3600
A151.101.195.103600
A151.101.3.103600
A151.101.67.103600
A151.101.131.103600
MX5 ktm-com.mail.protection.outlook.com.3600
TXT"adobe-idp-site-verification=b2214f35b1dc489510a4b189c48e00de725660d0c566a38fe6f18730cb141008"300
TXT"amazonses:sbQqARakOccVEFCl58xCwW38PWopiLRNSZVuzqL+k9Y="300
TXT"apple-domain-verification=1OnDcW6Fg2KQteVC"300
TXT"apple-domain-verification=jf6KCaOFTJzfXgge"300
TXT"atlassian-domain-verification=3xRORGFOH8QGHBCZwbZCaY2ZtmRD1VGLRVxWjvpiinZ/faLrc0dqEFVvC2/rwoFw"300
TXT"autodesk-domain-verification=wTpB4z8qFbCeie7TSAm2"300
TXT"brevo-code:2798f84eec49d7180a36401aae4ff154"300
TXT"brevo-code:507e9e393c866892e5d9f8b6c76f0c1b"300
TXT"brevo-code:6f3571a941f632ed6723b3689a4fa84e"300
TXT"brevo-code:7303c4fe93330b810281b25ccfa60629"300
TXT"brevo-code:84b5cb53fb4192daa998766a669210a1"300
TXT"brevo-code:af0edde2523890e7d1d5f7bc5cd47f7f"300
TXT"brevo-code:b389a6d40a47892a3d5a213832d8cbac"300
TXT"brevo-code:babc52feef4d6c71dabc9ae931237255"300
TXT"brevo-code:bad521c2e3db246d63f98a966a27637c"300
TXT"brevo-code:bb169ddb7f1c30595c16a57754159c0b"300
TXT"cisco-ci-domain-verification=78f5b07a87eb809ab50c08f1d23bf592ab74e6231f7029017db6f7b55731e65d"300
TXT"docusign=a49bc2b5-903e-49e5-971c-6296bdd91e59"300
TXT"facebook-domain-verification=wl6knlncrlvsviadtw3jvdd5s5qsdm"300
TXT"fastly-domain-delegation-jtQsAFrgD4uFwZdp-741206-2024-02-20"300
TXT"fastly-domain-delegation-vw49024vs4va-20022024"300
TXT"figma-domain-verification=b91b47ff21757e648ce7d0076e733f5bbf6aeca9368d444e4acbc27c70893474-1720502333"300
TXT"g1wr1nxgfbq0g8t4t4ys7cwggxkx2g45"300
TXT"google-site-verification=8iwJHVp2nsLsRsbDrSPDZ3SoXsJjJSx-59k83QmIkNc"300
TXT"have-i-been-pwned-verification=38e01fa75ef125b3267e975a4b871ae6"300
TXT"intersight=67e15ccd0c3a6db956f5736b8dd412737017a02a0c41d6a227319203f03b082e"300
TXT"intersight=e9989bf90e52bd44c98543da7817eae5c4476c1af0d8c231e2853bfac596748f"300
TXT"jamf-site-verification=6rJL1T0NMm1daw6u1Gyz9w"300
TXT"jvs1rfp14sz3ctt3cpfqb9ptg89x6g49"300
TXT"miro-verification=d69b16721fa4da00cc4865e685f83e908b4afe36"300
TXT"twilio-domain-verification=5e393d73b74bd257771931fbee2a3ab4"300
TXT"v=spf1 include:spf.protection.outlook.com include:_spf.31326.transactional-mail-a.com include:mail.zendesk.com include:spf.presstige.at a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:spf.crsend.com include:spf_a.ktm.com -" "all"300
TXT"v=verifydomain MS=ms78601995"300
TXT"/NaA1zloF1nWxDq5z0yDx/LO0e4JwV/asOo29w6oGJvmvQeKoyqI2KCSKdfBAVFywi6x27bY3X3uiu72r4fPbQ=="300
TXT"30s47q6hdmgr00tf4gvd2rcjryv1bsbr"300
TXT"870262c6-514f-4e20-bd45-2e4b13899290"300
TXT"9c696f32b6fe2e82a53b2f363fe35cc7c9b413695459403ee6"300
TXT"BF394DAB87468A8F6976938BD7714F9804BD3589D5E67CB5F92B2043AD37229D"300
TXT"Console5c4b5f07-1941-4e9d-b76b-564bc2c63ecf"300
TXT"Dynatrace-site-verification=066dbffb-1f1e-4f2f-acd1-6b3d14c5d801__1pcal1tstrn98gggeds2nql8rt"300
TXT"Dynatrace-site-verification=46c2e78f-3082-45ff-a13d-47043300fa9a__odejje2tkodutb6i7nssqfrjd8"300
TXT"_7fl8t1csr50p9qsl9my7111o0yel4ol"300
TXT"adobe-aem-verification=cloud-backup-dev.ktm.com/33062/183767/74d67496-7fb8-44a7-a2d5-e73d92d9882a"300
TXT"adobe-aem-verification=cloud-dev.ktm.com/33062/179655/c2d816c5-21b9-47f2-bfd4-4dced1b8de39"300

Checks

  • ✓ TTLs within range #32
    TTLs: A 1h, MX 1h, NS 1h. The NS TTL at the parent is 2d and in the zone 1h; resolvers may use either.
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • ✓ No wildcard #34
    Names that don't exist return NXDOMAIN.
  • i
    No CAA records
    Without CAA records any certificate authority may issue certificates for this domain. A CAA record limits issuance to the CAs you use.
    #35